Rapid7 Vulnerability & Exploit Database

Huawei EulerOS: CVE-2021-3999: glibc security update

Back to Search

Huawei EulerOS: CVE-2021-3999: glibc security update

Severity
4
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
Published
04/25/2022
Created
06/15/2022
Added
06/14/2022
Modified
06/14/2022

Description

A flaw was found in glibc.An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1.A local attacker who can control the input buffer and size passed to getcwd() in a setuid program could use this flaw to potentially execute arbitrary code and escalate their privileges on the system.

Solution(s)

  • huawei-euleros-2_0_sp10-upgrade-glibc
  • huawei-euleros-2_0_sp10-upgrade-glibc-all-langpacks
  • huawei-euleros-2_0_sp10-upgrade-glibc-common
  • huawei-euleros-2_0_sp10-upgrade-glibc-locale-source
  • huawei-euleros-2_0_sp10-upgrade-libnsl
  • huawei-euleros-2_0_sp10-upgrade-nscd

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;